VULNERABILITY ANALYSIS IN SMART HOMES: PROPOSAL FOR A LAYERED RESIDENTIAL IOT SECURITY MODEL (MSIOT-RC)
DOI:
https://doi.org/10.63330/armv2n7-002Keywords:
ESP32, Information Security, Internet of Things, Smart Home, VulnerabilitiesAbstract
This paper presents an in-depth analysis of security vulnerabilities in smart home systems based on the Internet of Things (IoT). The research is grounded in the growing adoption of connected residential technologies and the cyber risks associated with exposing sensitive routine, habit, and behavior data. Based on a systematic literature review and practical penetration testing, a functional smart home prototype was developed using the ESP32 platform, integrating sensors, actuators, and a control application. Vulnerabilities were identified using specialized tools — Nmap, Wireshark, Aircrack-ng, hping3, and Bandit covering application, network, and hardware layers. As an original contribution, the IoT Residential Security Layered Model (MSIoT-RC) is proposed, a multidimensional protection architecture that integrates enhanced authentication with bcrypt, temporary tokens with HMAC-SHA256, network isolation, and physical hardening. Results demonstrate a significant increase in security levels across all analyzed dimensions, validating the effectiveness of the proposed measures.
Downloads
References
ALRAWAIS, A. et al. IoT-SAF: IoT Security Assessment Framework. In: INTERNATIONAL CONFERENCE ON INTERNET OF THINGS AND CLOUD COMPUTING. Proceedings. Cambridge, UK: ACM, 2017. p. 1-8.
ATZORI, L.; IERA, A.; MORABITO, G. The Internet of Things: A survey. Computer Networks, Amsterdam, v. 54, n. 15, p. 2787-2805, 2010.
BARBIERI, C. E. F. Vulnerabilidade de dispositivos IoT em Smart Homes. 2022. Trabalho de Conclusão de Curso (Bacharelado em Ciência da Computação) — Faculdade de Tecnologia de Americana, Americana, 2022.
BASATWAR, G. OWASP IoT Top 10: Complete Guide. AppSealing, 26 jun. 2024. Disponível em: https://www.appsealing.com/owasp-iot-top-10/. Acesso em: 1 dez. 2024.
CISCO. Fundamentos de Segurança de Redes. São Paulo: Cisco Networking Academy, 2023.
DE BORTOLI, K. U.; BALTAZAR, N. C. Segurança em IoT: Análise de Vulnerabilidades em Dispositivos Conectados. Americana, SP, 2023.
FERNANDES, E. et al. Security analysis of emerging smart home applications. In: IEEE SYMPOSIUM ON SECURITY AND PRIVACY. Proceedings. San Jose, CA: IEEE, 2016. p. 636-654.
GOMES, E. F. S. Segurança de Redes: Boas Práticas e Mecanismos de Segurança para Dispositivos Conectados à IoT. Floresta, PE, 2018.
GONÇALVES, R. L. M. Automatização Residencial: Um Estudo de Caso da Aplicação da Internet das Coisas. Florianópolis, SC, 2019.
HARPER, R. Inside the smart home: ideas, possibilities and methods. In: HARPER, R. (Ed.). Inside the Smart Home. London: Springer, 2003. p. 1-17.
JUNIOR, C. A. D. O. A Segurança de Informação na Internet das Coisas. Campo Grande, MS, 2020.
OUADDAH, A. et al. Access control in the Internet of Things: Big challenges and new opportunities. Computer Networks, Amsterdam, v. 112, p. 237-262, 2017.
RIBEIRO, R. M. O. Segurança em IoT: Simulação de Ataque em uma Rede RPL. Patos de Minas, 2018.
SILVA, M. V. Implementação de uma Rede de Sensores para Monitoramento Ambiental com ESP32. Florianópolis, 2018.
STALLINGS, W.; BROWN, L. Computer Security: Principles and Practice. 4. ed. Boston: Pearson, 2018.
STATISTA. Internet of Things (IoT) connected devices worldwide. Hamburg, 2024.
WORLD ECONOMIC FORUM. Global Risks Report 2023. Geneva: WEF, 2023.
XU, L. D.; HE, W.; LI, S. Internet of Things in industries: A survey. IEEE Transactions on Industrial Informatics, New York, v. 10, n. 4, p. 2233-2243, 2014.
ZHANG, Z. K. et al. IoT security: Ongoing challenges and research opportunities. In: IEEE INTERNATIONAL CONFERENCE ON CLOUD COMPUTING TECHNOLOGY AND SCIENCE. Proceedings. Singapore: IEEE, 2020. p. 1-8.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
